https://imandrea.me/blog/saml-under-the-hood/